Cisco 400-007 Exam With Confidence Using Practice Dumps

Graphical user interface Description automatically generated with medium confidence

C (Untrusted VLAN): In out-of-band NAC Real-IP Gateway mode, unauthenticated clients are placed into the untrusted VLAN. The Clean Access Server handles traffic from these clients until authentication is complete.

Why other options are incorrect:

A: Authentication VLAN applies to some inline modes but not Real-IP Gateway.

B: User VLAN is assigned after successful authentication.

D: Management VLAN is used for administration, not for client onboarding.

—

Unicast Reverse Path Forwarding (uRPF)is a security feature that helps mitigate IP spoofing attacks. It checks whether the source of a packet received on an interface matches the best return path to that source in the routing table.

Strict Mode (C):Ensures the source IP address of a packet is reachable via the same interface on which the packet was received. This prevents forged source IP addresses from traversing the network, which is essential in defending against outbound DDoS attacks sourced from infected hosts.

Loose Mode (B):Only verifies that the source IP exists in the routing table (less strict), which might still allow spoofing in multi-homed or asymmetric environments.

uRPF strict mode is the best fit in secure environments with symmetric routing—commonly in enterprise edge or distribution layers.

==========